From 99685d5e93a819ccfbdcb831e79d7b7f9836a1b5 Mon Sep 17 00:00:00 2001 From: Brandon Corbett Date: Fri, 6 Nov 2026 01:29:29 -0500 Subject: [PATCH] ci(conformance): hold source builds to the permission guard contract --- .github/workflows/verify-conformance.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/verify-conformance.yml b/.github/workflows/verify-conformance.yml index 1d93ab3..9ef643a 100644 --- a/.github/workflows/verify-conformance.yml +++ b/.github/workflows/verify-conformance.yml @@ -55,6 +55,10 @@ jobs: # Layers the CI-only build cache over the base compose file. Read by # `seamless verify`; unset locally, where `type=gha` would be an error. SEAMLESS_VERIFY_COMPOSE_OVERRIDE: ${{ github.workspace }}/seamless-cli/verify/docker-compose.cache.yml + # Holds the Express and Fastify reference apps to the pending contract when they are + # built from source. The published packages may predate the guard, so a released run + # skips it. Remove once the contract leaves verify/harness/lib/pendingContracts.ts. + SEAMLESS_VERIFY_CONTRACTS: ${{ inputs.local && 'permission-guards' || '' }} steps: - name: Checkout seamless-cli uses: actions/checkout@v7